Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/05/2026, 04:33
Behavioral task
behavioral1
Sample
2026-05-09_a910a1a98a240fd7d38f615a2ade992b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20250619-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_a910a1a98a240fd7d38f615a2ade992b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-09_a910a1a98a240fd7d38f615a2ade992b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
- Size 515KB
- Sample260509-e6zbhadz8j
- SHA256 4cd8749719a4137a21866b7f92bff895221d2b207d19ead53b1550d877b0e661
- MD5 a910a1a98a240fd7d38f615a2ade992b
- SHA1 1acbf3e8a057327c692f2e993da6b70e0af1fab5
- SHA512 7c23af4d07decdc52eef5377a885e21020520fe9a6809b5e59dc6ca79b4825424c969a8c386e6bd03291fd9136f1cc353c262c9ad0de94bbdd3ac08d3a9824d5
- SSDEEP 6144:zkv2V1chVIo8br5rLUeAcYGLmEs6FTirxcEOkCybEaQRXr9HNdvOa:zFVO7IJrYeAcYGLmEqxOkx2LIa
- TLSH T16BB47C2AF6A1C076C4779574C49286AAFBB1B43277204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-09_a910a1a98a240fd7d38f615a2ade992b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-09_a910a1a98a240fd7d38f615a2ade992b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-09_a910a1a98a240fd7d38f615a2ade992b_amadey_coinminer_elex_graphican_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1720